PT-2019-17508
CVE-2019-5215
·
تاريخ النشر
2019-06-04
·
تاريخ التحديث
2020-08-24
الوصف من
CVSS 3.1
6.8
متوسطةالمقاييسAV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions
Huawei P30 smartphones versions prior to ELE-AL00 9.1.0.162(C01E160R1P12/C01E160R2P1)
Huawei P30 Pro versions prior to VOG-AL00 9.1.0.162 (C01E160R1P12/C01E160R2P1)
Description
The issue allows an attacker to perform a man-in-the-middle (MITM) attack when users establish a connection and transfer data through Huawei Share. This could enable the attacker to sniff, spoof, and intrude the Huawei Share connection, potentially obtaining and tampering with the data.
Recommendations
For Huawei P30 smartphones versions prior to ELE-AL00 9.1.0.162(C01E160R1P12/C01E160R2P1), update to version ELE-AL00 9.1.0.162(C01E160R1P12/C01E160R2P1) or later.
For Huawei P30 Pro versions prior to VOG-AL00 9.1.0.162 (C01E160R1P12/C01E160R2P1), update to version VOG-AL00 9.1.0.162 (C01E160R1P12/C01E160R2P1) or later.
As a temporary workaround, consider disabling Huawei Share until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾